About the role
This is a senior security engineering role focused on protecting cloud infrastructure, systems, and products at scale. You'll partner with engineering teams to embed security into architecture, development workflows, and operational practices. The role combines hands-on software engineering with cloud infrastructure security, automation, threat modeling, and incident response. You'll help strengthen AWS and Kubernetes environments while building tools and controls that identify and mitigate security risks.
Responsibilities
- Partner with engineering teams to review cloud and compute architecture changes and identify security implications.
- Develop threat models for cloud and compute platforms to identify risks and inform appropriate security controls.
- Build, adopt, and maintain tools that monitor and harden cloud infrastructure and operating systems.
- Develop security logging and monitoring pipelines and support intrusion detection capabilities.
- Apply AWS and Kubernetes security expertise to guide remediation efforts and shape the security control roadmap.
- Define and implement security policies, monitor compliance, and help ensure infrastructure remains aligned with established controls.
- Develop automation and security tooling for threat detection, incident containment, network access management, and other security requirements.
- Integrate security practices into engineering workflows and CI/CD environments to identify vulnerabilities earlier.
- Conduct initial security incident triage, assessing scope, urgency, and potential impact, and participate in incident response activities.
- Contribute to secure coding practices, technical standards, and knowledge sharing across engineering teams.
Requirements
- Strong experience as a software engineer, with deep technical capability in at least one infrastructure or security domain.
- Hands-on experience securing large-scale cloud environments, particularly AWS.
- Strong understanding of infrastructure-as-code and tools such as Terraform or CloudFormation.
- Knowledge of AWS IAM policies, network segmentation, VPC design, cloud-native monitoring, and logging.
- Experience identifying cloud misconfigurations, assessing security risks, and driving remediation.
- Experience with security automation and integrating security tooling into CI/CD pipelines.
- Familiarity with SAST, DAST, dependency scanning, and secure software development practices.
- Strong Linux and systems security knowledge, including container security, POSIX capabilities, SECCOMP, and Linux Security Modules.
- Kubernetes security experience is valuable, as is familiarity with serverless architectures, OSQuery, or eBPF.
- Product security experience is a plus, including knowledge of secure web applications, APIs, OWASP Top 10, XSS, CSRF, and SQL injection.
Conditions
- For Toronto and Vancouver-based candidates: $221,209–$256,433 CAD + equity + benefits.
- For candidates in other Canadian locations: $206,461–$239,337 CAD + equity + benefits.
- Flexible equity program in eligible countries.
- Medical, dental, and vision coverage.
- Equity refreshers.
- Remote work reimbursement.
- Paid time off.
- Employee assistance programs.
- Fully remote work within eligible locations in Canada.